REMARKS 

Applicant respectfully traverses and requests reconsideration. 

Applicant wishes to thank the Examiner for the notice that claims 15-24, 36-43 and 49 
are allowed. 

Claims 3, 9, 12, 30, 33 and 46 would be allowable if rewritten in independent form. 
Applicant has added claims 50, 51, 52 and 53 which represent effectively the allowable subject 
matter set forth in the office action dated August 4, 2003. For example, claims 50 is a 
combination of claims 1 and 3 as they existed during that time, claim 51 is the combination of 
claims 1 and 9, claim 52 is the combination of claims 1, 6 and 12, and claim 53 is the 
combination of claims 44 and 46. Accordingly, these claims are believed to be in condition for 
allowance. 

Remaining claims 1, 2, 4-6, 8, 10, 11, 13, 14, 25-29, 31, 32, 34, 35, 44, 45, 47 and 48 
stand rejected under 35 U.S.C. § 102(b) as being anticipated by the Open Group, "X/Open Single 
Sign On Service (XSSO) - Plugged Authentication Modules" reference. Claims 1 and 25 have 
been amended to point out that the security keys that are dynamically created are for a subscriber 
having at least one preexisting security credential set. In addition, claim 1 includes providing a 
configurable security key manifest operative to contain a non-prespecified number of security 
keys and controlling through a configured security key manifest, a generation of the new security 
key for the subscriber based on received key attribute data contained in the configured security 
key manifest to allow the subscriber to update the preexisting credential set based on the new 
security key. The office action cites the XSSO specification as allegedly teaching the claimed 
subject matter. However, Applicant respectfully submits that the reference teaches a different 
approach. 
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For example, there is no configurable security key manifest that contains a non-specified 
number of security keys. The office action cites no specific page number but instead states that 
since there is an authentication mechanism and multiple components for implementing user 
authentication and session establishment that this allegedly meets the limitation of providing a 
configurable security key manifest operative to contain a non-specified number of security keys. 
Applicant is unable to find any table, template, list or any other security key manifest provided in 
the XSSO reference. In particular the office action refers to page 10 as indicating that the XSSO 
sign on service has a service cache that stores sign on information obtained or derived as part of 
a primary sign on operation and that the same information can be retrieved for use in subsequent 
secondary sign on operations during the current user session. This portion is allegedly cited as 
meeting the limitation of accepting key attribute data to produce a configured security key 
manifest and generation of a new security key for the subscriber based on received key attribute 
data contained in a security key manifest. Applicant respectfully requests a showing as to which 
data in the cited reference is the key attribute data, which data specifically corresponds to the 
security key manifest that is configurable and which data is the configured security key manifest 
as Applicant is unable to find such a teaching. 

The cited reference instead teaches a cache that is cleared on termination of a user session 
and is used to support a single sign on after initial login the information is cached to support 
subsequent logins but is cleared at the end of the session. The cache appears to only store 
information that is obtained or derived as part of the primary sign on operation. Also, the 
subscriber in XSSO does not have any preexisting security credential set that is used in the 
XSSO operation prior to logon nor is there any security key manifest or key attribute data that is 
used to update a security key manifest so that it goes from a configurable to a configured security 
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key manifest. There does not appear to be a new keys generated as the same keys appear to be 
used for subsequent sessions also. Accordingly, the claims are in condition for allowance. In 
addition, claim 25 also requires, for example, that a new security key is generated based on a 
received key attribute data contained in the configured security key manifest. The office action 
does not address which data in the XSSO reference also corresponds to the claimed received key 
attribute data contained in the configured security key manifest nor how the subscriber has at 
least one preexisting security credential set as the security credentials in the XSSO model appear 
to be unused after sign off that are not preexisting prior to any sign on or login. Accordingly, the 
claims are in condition for allowance. 

The dependent claims add additional novel and non-obvious subject matter. 

Applicant respectfully submits that the claims are in condition for allowance and that a 
timely Notice of Allowance be issued in this case. The Examiner is invited to contact the 
below-listed attorney if the Examiner believes that a telephone conference will advance the 
prosecution of this application. 



Vedder, Price, Kaufman & Kammholz, P. C. 
222 N. LaSalle Street 
Chicago, EL 60601 
PHONE: (312)609-7500 
FAX: (312)609-5005 



Respectfully submitted, 



Date: 





Christopher ^Reckamp 
Registration No. 34,414 
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